Rank: Member
Joined: 1/24/2008(UTC)
Posts: 4
|
I'm wondering if there is a setting I can change so that the admin panel doesn't log me out after being inactive for 10min or so.
If anyone knows of a way to stay logged in, I'd appreciate it.
Thanks,
John
|
|
|
|
|
|
Rank: Member
Joined: 6/6/2005(UTC)
Posts: 483
|
I'm not sure, but I think all you have to do is click the remember me check box when you sign in!
If thats not it I know there is a configuration someplace because I never get logged off. I just don't remember where it is.
Bob Noble
|
|
|
|
|
|
Rank: Member
Joined: 1/24/2008(UTC)
Posts: 4
|
Thanks for your thought Bob but it I'm not sure that's it.
I'm using BVC5 SP3.1 and there isn't a "remember me" checkbox when I log in...just a white page with a username and pword fields and submit buttons.
I then checked in Options under users and saw that the remember users box was already checked so that can't be it either.
Anyone else know of a way to keep from being logged out of the admin panel?
|
|
|
|
|
|
Rank: Member
Joined: 11/13/2004(UTC)
Posts: 189
|
Which Browser are you using? |
|
|
|
|
|
|
Rank: Member
Joined: 10/24/2005(UTC)
Posts: 40
Thanks: 1 times
|
I've noticed that my partner never gets logged off. The only difference, that I can think of, is that I am using the original admin account, just renamed. She is a new user that I added to the "New administrator" group. This on a bv5 sp2 site. I haven't looked into this any further that that.
Paul
|
|
|
|
|
|
Rank: Member
Joined: 1/24/2008(UTC)
Posts: 4
|
Thanks Paul, I'll look into trying a new admin account. Rudy: I'm using Firefox, but I just tried it in IE and the same thing happened. After maybe 15 min or so of inactivity, when I return to the panel and try to go to another page in the panel it forces me to re-login. I've tried to attach a screenshot of the login page here just to show that there is no "remember me checkbox" Anyone else have any tips for me? John jjrjr attached the following image(s):  BVC login page.png (4kb) downloaded 90 time(s).You cannot view/download attachments. Try to login or register.
|
|
|
|
|
|
Rank: Member
Joined: 1/3/2004(UTC)
Posts: 1,497
|
Typically, an inactive browser gets logged out around 20 minutes by default. There is a server setting or web.config setting, not a BVC admin setting, that can be adjusted, but I don't think you can do it only for the admin. Too high a setting will keep everybody's browser active, which isn't good. I know this has been discussed before somewhere in this forum, just haven't looked for a reference. |
|
|
|
|
|
|
Rank: Member
Joined: 1/24/2008(UTC)
Posts: 4
|
Thanks Chris.
You're right, I wouldn't want to change my browser settings. But some online accounts leave you logged in while others kick you out. Banks and financial sites tend to log you out after being inactive which makes good sense. But I know my last shopping cart kept me logged in even after a full day of inactivity. I just figured there must be some way to fix BVC to keep an administrator logged in on his work computer.
John
|
|
|
|
|
|
Rank: Member
Joined: 3/3/2006(UTC)
Posts: 1,737
|
johnr1,
You can log in at your sites home page, just like any other user/shopper. There you WILL find the 'remember me' button. I've had my site open and I've been logged in for hours, sitting idle. It may be however that the next activity causes a new log in without me seeing it, because I've been remembered.
I log in by saving an active session in my browser's (IE6) favorites, and using that to get in in the morning. No log-in req'd. Might work for you. |
Optimists invent airplanes,
Pessimists buy parachutes. |
|
|
|
|
|
Rank: Member
Joined: 4/28/2003(UTC)
Posts: 141
|
I'm not sure about this, but I do remember when we first upgraded to to Bvc5 from BV2004 that I was always logged on and never was booted off after the 20 minute limit. I then went into admin > options > users > and unchecked the remember user password checkbox. After that I always had to login and was kicked off after 15 - 20 minutes. Richard www.somethingmorestore.com
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 2,136
Was thanked: 1 time(s) in 1 post(s)
|
As a security precaution, the "Remember Me" feature does not work with the built-in administrator account. It does work with any other administrator account, so if you want to stay logged in...
1. Create a new adminstrator account.
2. Log out of the built-in adminstrator account.
3. Log in to the front of the store using your new administrator account and select Remember Me.
After this, your session will still be dropped after 20 minutes (or for any of the other dozens of reasons that sessions are dropped), but you will automatically be logged back in when you click on something.
Note: This is a pretty high security risk if your workstation is not physically protected. |
|
|
|
|
|
|
Rank: Member
Joined: 3/3/2006(UTC)
Posts: 1,737
|
Andy, that's exactly how I did it - new account. I'm the only one here so an open back door is OK. |
Optimists invent airplanes,
Pessimists buy parachutes. |
|
|
|
|
|
Rank: Member
Joined: 4/28/2003(UTC)
Posts: 141
|
Good points Andy. Glad you posted this. As I said I really wasn't sure about why the checkbox was there, I just knew checking it would cause you to stay logged in all the time.
Thanks,
Richard
|
|
|
|
|
|
Rank: Member
Joined: 6/6/2005(UTC)
Posts: 483
|
Thats where I saw it. I knew it was out there somewhere.
My impression was the check box was universal. Everyone (including new admin) that clicks the Remember Me Button stays logged in when the box was checked. The problem is on most web sites the remember me box is checked by default. This means if the customer signs on a public computer and forgets to uncheck the box or anyone gets access to his computer, they are automatically logged into his account as soon as they click on his favorites menu. If the credit card information is encrypted (it is on BV) the customers name, address and phone are about all they can get at (in addition to the customers order history) most of which is available in TPB (The Phone Book).
Like Mitch, I like the convenience of just clicking the button and being logged into our site and access to my computer is limited to only a couple trusted individuals. I also think it can be a useful convenience for some of our computer challenged customers to do the same.
The real risk of compromise is if someone breaks in and steals my computer or my partners lap top. My partner does not use the remember me feature but if he accidentally did... The problem is BV admin has a little feature where you can display the customers Credit Card number --> Big Compromise. If you leave the default settings to a week or two, they will only be able to get at the last week or two's business which is still a compromise, just not as big.
So we use the little routine (I think it was Andy that came up with it) that converts the CC number to all zeros immediately after the customer clicks place order. We feel this reduces our potential for compromise to acceptable levels and still allows us the convenience we enjoy.
Bob Noble
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.